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INFORMATION SYSTEMS SECURITY GROUP 
MONTHLY [TGHLIGHTS 


November 1977 


SPECIAL ACTIVITIES: 


1. ADP Risk Assessment 


Information Systems Security Group personnel 
continue to interview users and application programmers 


STATINTL of the Agency's computer systems. An Information Systems 
Security Group working group is scheduled at 


STATINTL a 1 and 2 December to discuss preliminary 
‘indings and to discuss report writing. 


2. CRAFT (Clandestine Record Automated Field Terminal) 


The CRAFT Working Group continues to meet and 
discuss the problems concerning the paperless field station 
concept, and it is anticipated that the DCI will be briefed 
on this activity in the near future. 


5. Treaty Organization 


Representatives of Information Systems Security 
Group met with officials in the Department of the Army to 
discuss the return of SEATO documents held by CIA for 
storage at the National Archives. Current plans are to 
request disestablishment of the CIA SEATO Subregistry by 
the end of calendar year 1977. 


At the request of the Office of Scientific 
Research (OSR), the CIA NATO Subregistry was upgraded 
to include the storage of ATOMAL material, and three 
individuals in OSR received an appropriate ATOMAL bricfing 
from the CIA Treaty Organization Control Officer. 


TRAINING: 
1. Internal 
One individual from Information Systems Security 


Group attended a three day course in Basic VM sponsored 
by the Office of Data Processing. 
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z. External 


All members of Information Systems Security 
Group attended a one day tutorial given by two independent 
contractors specializing in the field of computer security. 
The tutorial covered various aspects of computer security 
and computer operating systems. 


GENERAL: 


A member of Information Systems Security Group 
accompanied a representative of ORD and an independent 
contractor to various QM concerns to discuss 
research and development in the field of computer security. 


STATINTL 
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